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DETAILED ACTION 

1. Claims 1- 9 are pending for examination. 

2. Claims 1- 9 are rejected. 

Claim Rejections - 35 USC §102 
The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that form the 
basis for the rejections under this section made in this Office action: 

(e) the invention was described in (1) an application for patent, published under section 122(b), by another filed 
in the United States before the invention by the applicant for patent or (2) a patent granted on an application for 
patent by another filed in the United States before the invention by the applicant for patent, except that an 
international application filed under the treaty defined in section 351(a) shall have the effects for purposes of this 
subsection of an application filed in the United States only if the international application designated the United 
States and was published under Article 2 1(2) of such treaty in the English language. 

3. Claims 1- 9 are rejected under 35 U.S.C. 102(e) as being anticipated by Erickson et al, 
U.S. Patent Application Publication US 2003/0081791 Al. 

4. As per claim 1 ; "A method of transmitting data over a network, the method comprising: 
retrieving a web page, the web page having one or more XML data islands [figures 1-9 

and associated descriptions, para. 0007-0030, whereas the XML based modular document is 
passed from a first party to a second party over the Internet, and more specifically, where the 
WEB services involves the clients requesting via associated browsers; a WEB page from the 
requested server, clearly encompasses the claimed limitations as broadly interpreted by the 
examiner.]; 

selecting which of the one or more XML data islands stores data to be secured before 
transmitting over the network [figures 1-9 and associated descriptions, para. 0007-0030, 
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generally, and more specifically para. 0022-28, whereas the XML based modular document with 
"... the pair of <EncryptionData> tags determining encryption boundaries of a module . . . 
encryption ..." clearly encompasses the claimed limitations as broadly interpreted by the 
examiner.]; 

encrypting the one or more selected data islands [figures 1-9 and associated descriptions, 
para. 0007-0030, whereas the XML based modular document with "... the pair of 
<EncryptionData> tags determining encryption boundaries of a module . . . encryption . . 
clearly encompasses the claimed limitations as broadly interpreted by the examiner.]; and 

transmitting the web page with the encrypted data islands and the unencrypted data over 
the network [figures 1-9 and associated descriptions, para. 0007-0030, whereas the XML based 
modular document is passed from a first party to a second party over the Internet, and more 
specifically, where the WEB services involves the clients requesting via associated browsers; a 
WEB page from the requested server, clearly encompasses the claimed limitations as broadly 
interpreted by the examiner.].". 

5. Claim 2 additionally recites the limitation that; "A method as recited in claim 1 further 
comprising 

receiving a request at a server to retrieve a web page, the web page containing HTML, 
images, and interactive data.' 5 . 

The teachings of Erickson et al suggest such limitations (figures 1-9 and associated descriptions, 
para. 0007-0030, whereas the XML based modular document is passed from a first party to a 
second party over the Internet, and more specifically, where the WEB services involves the 
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clients requesting (i.e., request via a WEB service is inherently interactive) via associated 
browsers; a WEB page from the requested server (i.e., para. 0030, a Microsoft Word document 
includes image object insertion), clearly encompasses the claimed limitations as broadly 
interpreted by the examiner.). 

6. Claim 3 additionally recites the limitation that; "A method as recited in claim 1 wherein 
selecting which of the one or more XML data islands stores data to be secured before 
transmitting over the network further comprises 

determining with data is interactive database data.". 
The teachings of Erickson et al suggest such limitations (figures 1-9 and associated descriptions, 
para. 0007-0030, whereas the XML based modular document is clearly assembled prior to 
associated encryption of appropriate parts prior to transmission over the network (i.e., para. 
0030, a Microsoft Word document includes image object insertion into the various document 
objects), and further that WEB services are inclusive of database access, clearly encompasses the 
claimed limitations as broadly interpreted by the examiner.). 

7. Claim 4 additionally recites the limitation that; "A method as recited in claim 1 wherein 
encrypting the one or more data islands further comprises 

using any suitable encryption routine, 

wherein the encryption routine is selected based on 
the level of security desired and 
a reduction in the amount of overhead". 
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The teachings of Erickson et al suggest such limitations (figures 1-9 and associated descriptions, 
para. 0007-0030, whereas the XML based modular document with . . the pair of 
<EncryptionData> tags determining encryption boundaries of a module . . . encryption . . .", and 
further (i.e., para. 0028-0029) the use of public key (session key transport), and session key 
(content encryption components transport), and SOAP and XML objects parameters aspects of 
the message assembly, clearly encompasses the "... the level of security desired . . . reduction in 
the amount of overhead ..." claimed limitations as broadly interpreted by the examiner.). 

8. Claim 5 additionally recites the limitation that; "A method as recited in claim 1 wherein 
the web page is placed in XML format in a device being utilized to receive and transmit 

between two sources.". 

The teachings of Erickson et al suggest such limitations (figures 1-9 and associated descriptions, 
para. 0007-0030, whereas the XML based modular document is passed from a first party to a 
second party over the Internet, and more specifically, where the WEB services involves the 
clients requesting via associated browsers; a WEB page from the requested server, both clearly 
. . device being utilized to receive and transmit between two sources . . .", clearly encompasses 
the claimed limitations as broadly interpreted by the examiner.). 

9. Claim 6 additionally recites the limitation that; "A method as recited in claim 1 further 
comprising 

a computer 

receiving the web page with the encrypted data and 



Application/Control Number: 10/077,082 Page 6 

Art Unit: 2136 

decrypting the data in the XML data islands.". 
The teachings of Erickson et al suggest such limitations (figures 1-9 and associated descriptions, 
para. 0007-0030, whereas the XML based modular document is passed from a first party to a 
second party over the Internet, and more specifically, where the WEB services involves the 
clients requesting via associated browsers; a WEB page from the requested server, and the client 
subsequent receiving a requested Web page, and the server receiving the request with encrypted 
elements decrypted upon receception, clearly encompasses the claimed limitations as broadly 
interpreted by the examiner.). 

10. Claim 7 additionally recites the limitation that; "A method as recited in claim 1 further 
comprising 

adding sensitive data to the web page and 

wrapping the sensitive data in XML format.". 
The teachings of Erickson et al suggest such limitations (figures 1-9 and associated descriptions, 
para. 0007-0030, whereas the XML based modular document with "... the pair of 
<EncryptionData> tags determining encryption boundaries of a module . . . encryption . . .", and 
further (i.e., para. 0028-0029) the use of public key (session key transport), and session key 
(content encryption components transport), and SOAP and XML objects parameters aspects of 
the message assembly, clearly encompasses the ". . .adding sensitive data to the web page . . . 
wrapping the sensitive data in XML format. ..." claimed limitations as broadly interpreted by the 
examiner.). 



Application/Control Number: 10/077,082 Page 7 

Art Unit: 2136 

1 1 . Claim 8 additionally recites the limitation that; "A method as recited in claim 7 further 
comprising 

encrypting one or more XML data islands of the sensitive data after being placed in XML 
format.". 

The teachings of Erickson et al suggest such limitations (figures 1-9 and associated descriptions, 
para. 0007-0030, whereas the XML based modular document with "... the pair of 
<EncryptionData> tags determining encryption boundaries of a module ... encryption and 
further (i.e., para. 0028-0029) the use of public key (session key transport), and session key 
(content encryption components transport), and SOAP and XML objects parameters aspects of 
the message assembly, clearly encompasses the "... encrypting . . . XML data islands . . . sensitive 
data ... in XML. ..." claimed limitations as broadly interpreted by the examiner.). 

12. As per claim 9; "A method of sending secure data over a network, the method 
comprising: 

determining which data needs to be secured before transmitting over a network [figures 
1-9 and associated descriptions, para. 0007-0030, generally, and more specifically para. 0022-28, 
whereas the XML based modular document with "... the pair of <EncryptionData> tags 
determining encryption boundaries of a module . . . encryption . . .", clearly encompasses the 
claimed limitations as broadly interpreted by the examiner.]; 

storing the data in an XML data island [figures 1-9 and associated descriptions, para. 
0007-0030, whereas the XML based modular document with "... the pair of <EncryptionData> 
tags determining encryption boundaries of a module . . . encryption . . .", and further (i.e., para. 
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0028-0029) the use of public key (session key transport), and session key (content encryption 
components transport), and SOAP and XML objects parameters aspects of the message 
assembly, clearly encompasses the ". . .adding sensitive data to the web page . . . wrapping the 
sensitive data in XML format. ..." claimed limitations as broadly interpreted by the examiner.]; 
using an encryption routine to encrypt the data stored in the XML data island; 
combining the encrypted data with non-encrypted data before transmitting the encrypted 
data over the network, 

whereby overhead data as a result of encryption is significantly reduced [figures 
1-9 and associated descriptions, para. 0007-0030, whereas the XML based modular 
document is passed from a first party to a second party over the Internet, and more 
specifically, where the WEB services involves the clients requesting via associated 
browsers; a WEB page from the requested server, clearly encompasses the claimed 
limitations as broadly interpreted by the examiner.].". 
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Conclusion 



13. Any inquiry concerning this communication or earlier communications from examiner 
should be directed to Ronald Baum, whose telephone number is (571) 272-3861, and whose 
unofficial Fax number is (571) 273-3861. The examiner can normally be reached Monday 
through Thursday from 8:00 AM to 5:30 PM. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Ayaz Sheikh, can be reached at (571) 272-3795. The Fax number for the organization 
where this application is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. For more information for 
unpublished applications is available through Private PAIR only. For more information about the 
PAIR system, see http://pair-direct.uspto.gov . Should you have questions on access to the Private 
PAIR system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). 
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